Mahesh Belavi asked: What is India's level of preparedness to deal with massive cyber attacks, and is there any dedicated organisation for this purpose?

Arul R. replies: The level of preparedness to deal with cyber attack is gradually improving though there is much more left to be done. The framework for responding to cyber attacks has been put in place and is gradually being fleshed out through the implementation of the National Cyber Security Policy (NCSP) of 2013. Meanwhile, a National Cyber Security Coordinator was appointed in 2015.

Plans to establish a National Cyber Coordination Centre (NCCC) in order to handle online threats relating to national security are already in place. The NCCC will co-ordinate between various existing agencies (some of which are mentioned below) and the new agencies envisioned under NCSP such as Information Sharing and Analysis Centres (ISACs) to be established in critical sectors. Some of the ISACs such as in the banking sector are already up and running, while others are at various stages of implementation.

Key existing agencies dealing with cyber security are:

Computer Emergency Response Team (Cert-In): Cert-In operates under the authority of Department of Electronics and Information Technology, Ministry of Communications and Information Technology, Government of India. Cert-In is the national nodal agency for responding to computer security incidents as and when they occur (Objective no 4: CSP 2013).

National Critical Information Infrastructure Protection Centre (NCIIPC): As per the provisions of Section 70A of the Information Technology Act, 2000, the government has set up NCIIPC to protect the critical information infrastructure in the country (Objective no 5: CSP 2013).

Defence Information Assurance and Research Agency (DIARA): It is the nodal agency for cyber security related issues of the Tri Services and Ministry of Defence.

Posted on July 19, 2016